last executing test programs: 2m17.254130513s ago: executing program 3 (id=807): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x10c) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m16.931937611s ago: executing program 3 (id=812): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_matches\x00') lseek(r0, 0x1, 0x0) 2m15.752363894s ago: executing program 3 (id=814): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000000c0)={0x5, 0x7}) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x2080258, &(0x7f00000001c0)={[{@dax}, {@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x527, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0], 0x58}}, 0x40080) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000840)={{0x8, 0x4, 0x7, 0xb2d, 'syz1\x00', 0x3}, 0x3, 0x1, 0x5, 0xffffffffffffffff, 0x4, 0x8001, 'syz1\x00', &(0x7f0000000180)=['\'&/]\x00', 'wlan1\x00', '\xc2:\f/.-#\\\x00', '/$\x00'], 0x17}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f5, 0x200, 0x70bd28, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0xc8d4) 2m15.626664186s ago: executing program 3 (id=815): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRES32, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$eJzs3cFqE1EUxvFjU5s0pU0EERTUg250M7TxATRIC2JAqY2oC2FqJxoyJmUmVCJisxG3Pkdx6U5QX6AbcePeXREEN12II52ZtJM2bdM2TWL7/0GZO3Pux71N0nISSLLy4N3zUsE1CmZVBhIqAyJ1WRVJr41CJ8LjgD8ekqi6XB35/f38vYePbmdzuclp1anszLWMqo5d/PTi1ftLX6oj9z+MfYzLcvrxyq/Mj+Wh5bMrf2eeFV0tulquVNXU2Uqlas7als4V3ZKhete2TNfSYtm1nKZ6wa7Mz9fULM+NJucdy3XVLNe0ZNW0WtGqU1PzqVksq2EYOpqU422wjTn5pelpM7tt2Yt1dEc4dMOtLjpOtt66mF/qwp4AAECf2bn/D3r97fr/je5wL/3/md37f5Fo/58IF6H/74B609ku/T+OBMfJmsnw77cZ/T8AAAAAAAAAAAAAAAAAAAAAAP+DVc9LeZ6XWjuGl/zzuIgkgreA++c93iYOSfT+9yI/6/d/eL4pdr1H20WHRd64lxCx3y7kF/LBMahnC1IUWywZl5T88R8PoWA8dSs3Oa6+tHy2F8P84kI+JvFGviHdKn/h1ESQ1+b8SUlG189ISk63Xj/TMj8kVy5H8oak5OsTqYgtc/7jeiP/ekL15p3cpvywPw8AAAAAgKPA0HVbnr/7dX9CQrbWg3zk9QHP8xZ3en1g0/PrQTnXzkdUAgAAAACAA3NrL0umbVvOPgZxETlAvPMDzxPp/TZi0h+3RvPghoj0wTa6NUiISHBF9xP/uR5vK+W1MWcw/AaO/rh9dh/0+j8TAAAAgE7baPr3EPr25hB3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8dPu54E15m8pNQo7xCPLxbr+CwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB95F8AAAD//6loFW8=") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 2m15.336386731s ago: executing program 3 (id=818): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406a0564000000000000010902240001000010020904000b010300020009210000330122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x4, {[@local=@item_012={0x2, 0x2, 0x7, "bd8a"}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) 2m14.100322569s ago: executing program 3 (id=824): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x10c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m14.013643438s ago: executing program 32 (id=824): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x10c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000300)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.669684659s ago: executing program 5 (id=1175): r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r2, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x359, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 16.275446741s ago: executing program 5 (id=1177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 16.184957589s ago: executing program 4 (id=1179): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 15.223547453s ago: executing program 5 (id=1180): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) 14.904291501s ago: executing program 4 (id=1184): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000005b40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r1 = openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0xfffffffb, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) fallocate(r2, 0x8, 0x4000, 0x4000) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 14.561194071s ago: executing program 2 (id=1186): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x2) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) connect$bt_sco(r0, &(0x7f0000000240), 0x18) 12.402106461s ago: executing program 2 (id=1191): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000400)='./file0\x00', 0x1) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x50000048) inotify_add_watch(r3, &(0x7f0000005780)='./file0\x00', 0x9600006f) lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) 9.302323363s ago: executing program 4 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0xa00000000000000, 0x12) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) listxattr(0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000, 0x21) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffffffffffd2b}, 0x1, 0x0, 0x0, 0x80640d0}, 0x200488c9) 9.301795763s ago: executing program 0 (id=1194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 9.287540415s ago: executing program 5 (id=1196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) close(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 9.258396047s ago: executing program 2 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) getpgid(r0) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c010) 8.101650368s ago: executing program 2 (id=1199): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) ioctl$TCXONC(r0, 0x5608, 0x3) 7.896284326s ago: executing program 2 (id=1200): r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r2, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x359, &(0x7f0000000b00)=ANY=[@ANYBLOB="0180c20000020180c200000086dd6000cd0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000501000000000000000000030aa78c000005dc8080a20300f5ff4003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2b863fba452ed5a5f3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934fe4731f3f61effc978191d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa234e670670ffc5dc49dfb58d00000000000000000b17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b10b0a64cfd671545e65eb2bce9ac946a3f0e2be27bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b3030e92b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000000000000000000c5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2cbfb80caca82ffcee4b35ca9bd27c0640f12827b10504af0b952c207b21617b15179cf310611e008b97328552fe7c303a5667cce23e17d9dd2206b17082fdaf4733ac5c74f75494bbe9871275513ea9c7da062ec84270a0375584012c00b6870be5c0b7dc66452db4e07b5dd62f842c1da85759c8ff55493485f696533405c96a8fd2a253f3238c581e482958e47bb1a96ecdf0af676c0f0ca9bcc84dbaf0bf11092b63795d28db0ff74d6c5e3def3f3217cbb2a04bba62dd0dc89801c2597ca14e80558f4e7dbee2867501977a8ea9a91cdb1ed79bf97c66cf392324888eca47c0539f9455b292c16c7a1fb65f5c2fbc38cd84ca47dae600c6a55ae1800006a815ddb039ee568bb0b435d147aa6e1d7e518ac9254a622c46e317a5d92e5c208a9e397a1343a9c20981baab13655a6c5c283f"], 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 7.74965407s ago: executing program 0 (id=1202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 6.767561355s ago: executing program 2 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1ab56d83e500000000000000000400000000000000000000a0e10000"], 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/70, 0x46}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2a00040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_user}, {@cache_readahead}, {@dfltuid}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x28, r10, 0x20, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0xc}}}}}, 0x28}}, 0x4000054) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) 6.188105696s ago: executing program 4 (id=1206): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/config\x00') read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 5.721622937s ago: executing program 0 (id=1208): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setresuid(0x0, 0xee01, 0x0) chown(&(0x7f0000000300)='./cgroup\x00', 0xffffffffffffffff, 0x0) 4.731227474s ago: executing program 4 (id=1210): unshare(0x60400) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2042, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0xfffffffffffffffc, 0x6, 0x1000000000000}) 4.688263538s ago: executing program 0 (id=1211): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, &(0x7f0000000080)) fchdir(r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x600) lseek(r6, 0xd48a, 0x0) getdents64(r6, 0x0, 0x22) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'erspan0\x00', {0x300}, 0x4b5d}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 3.841536622s ago: executing program 1 (id=1212): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[], 0x6f4}}, 0x0) 3.691962576s ago: executing program 1 (id=1213): r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r2, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_emit_ethernet(0x359, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 2.672305185s ago: executing program 0 (id=1214): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x2) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) connect$bt_sco(r0, &(0x7f0000000240), 0x18) 2.6174639s ago: executing program 1 (id=1215): syz_clone(0x18081200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x4}]}) 2.39206548s ago: executing program 4 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0xa00000000000000, 0x12) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) connect$unix(r3, 0x0, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) listxattr(0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000, 0x21) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffffffffffd2b}, 0x1, 0x0, 0x0, 0x80640d0}, 0x200488c9) 2.188421737s ago: executing program 1 (id=1217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 2.187387648s ago: executing program 5 (id=1218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) 1.13471984s ago: executing program 0 (id=1219): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d010000090000082583dad20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582", @ANYBLOB="2a218c362ad99fdf2e6e5a2d9c8a90125d9ab2f56488958a497dd11bbee9424b4ff87cd1c9b77842e3bc666c5b991121e1625db8783fa50535d37f39622d8870c16702e3902e1344857c860cd9fad0dce3dbb7e1d5ac533fb7d76e52249fce6e88b654bd6d1b3a9cb4b86ae97845897b4bee4b54a768d767f09f77182154aa6bd6ca712392ce45070e74a18b6a8aa25d7806824fcc26b882179adbe642644ffd0ba69fb925faabb6aeec3d4c1950f76d8c", @ANYBLOB="92196f8546c053a4371f597ba8f1d3c3709cd2be7307089565424732552b9146ca96bd1dd100a77a8cc5db3893515869f277932d250645f7e2574cf2986af4ab4e9c1fb67126de2b9e889179bd2d9dad6784c26bfa6fcbb357eaa06d537cb75a75fa7c60c00affadd0dd582b9f43d72835f6dc5a7cb184bb3f0baeba173d16cdb801e82eed04346d859bae29f809821c257f5d12a4e36cc299a924fce7c1db5bba258060e3e5148ad1f3595f56724ed0d36bebb098763bf8dff2957a4e4ebe87cb66454f1e25f29e682f1d9a4a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.115732762s ago: executing program 5 (id=1220): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000400)='./file0\x00', 0x1) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x50000048) inotify_add_watch(r3, &(0x7f0000005780)='./file0\x00', 0x9600006f) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 988.328263ms ago: executing program 1 (id=1221): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setresuid(0x0, 0xee01, 0x0) chown(&(0x7f0000000300)='./cgroup\x00', 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) getpgid(r0) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c010) kernel console output (not intermixed with test programs): 26675][ T5345] loop4: detected capacity change from 0 to 1024 [ 126.795809][ T5348] loop1: detected capacity change from 0 to 512 [ 126.925915][ T5348] netlink: 56 bytes leftover after parsing attributes in process `syz.1.349'. [ 127.267119][ T5360] loop3: detected capacity change from 0 to 512 [ 128.222109][ T1335] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.229418][ T5360] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 128.339349][ T5360] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 128.392215][ T5360] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.480673][ T5368] device syzkaller0 entered promiscuous mode [ 128.592295][ T1335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.604131][ T1335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.624519][ T1335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.667749][ T1335] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.707111][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.741292][ T5375] loop4: detected capacity change from 0 to 128 [ 128.750776][ T1335] usb 1-1: config 0 descriptor?? [ 128.863275][ T5375] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 128.922312][ T5375] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.067466][ T5388] loop3: detected capacity change from 0 to 512 [ 129.075319][ T5386] loop2: detected capacity change from 0 to 1024 [ 129.212400][ T5388] netlink: 56 bytes leftover after parsing attributes in process `syz.3.366'. [ 129.312173][ T1335] usbhid 1-1:0.0: can't add hid device: -71 [ 129.318761][ T1335] usbhid: probe of 1-1:0.0 failed with error -71 [ 129.361051][ T1335] usb 1-1: USB disconnect, device number 6 [ 130.081136][ T5400] loop1: detected capacity change from 0 to 512 [ 130.231167][ T5402] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 130.240929][ T5400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.330839][ T5400] EXT4-fs (loop1): 1 truncate cleaned up [ 130.337309][ T5402] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 130.387846][ T5400] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 130.421566][ T5402] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.457331][ T5419] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 130.482224][ T5419] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 130.860824][ T5433] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 130.954206][ T5433] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.769612][ T5449] set_capacity_and_notify: 5 callbacks suppressed [ 131.769628][ T5449] loop4: detected capacity change from 0 to 128 [ 131.888095][ T5454] loop3: detected capacity change from 0 to 512 [ 131.941121][ T5449] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 131.970758][ T5449] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.011397][ T5449] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.389: No space for directory leaf checksum. Please run e2fsck -D. [ 132.030434][ T5449] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.389: checksumming directory block 0 [ 132.046289][ T5454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.153142][ T5454] EXT4-fs (loop3): 1 truncate cleaned up [ 132.159108][ T5454] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 132.165372][ T5465] loop4: detected capacity change from 0 to 1024 [ 132.204389][ T5467] loop0: detected capacity change from 0 to 128 [ 132.224630][ T5464] loop1: detected capacity change from 0 to 512 [ 132.246379][ T5467] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 132.327122][ T5467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.395633][ T5465] hfsplus: found bad thread record in catalog [ 132.401921][ T5465] hfsplus: found bad thread record in catalog [ 132.456890][ T4429] hfsplus: found bad thread record in catalog [ 132.463638][ T4429] hfsplus: found bad thread record in catalog [ 132.803142][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.092730][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.877377][ T5496] loop3: detected capacity change from 0 to 128 [ 134.253446][ T5496] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 134.348934][ T5496] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.412990][ T5496] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.405: No space for directory leaf checksum. Please run e2fsck -D. [ 134.419827][ T4260] udevd[4260]: incorrect ext4 checksum on /dev/loop3 [ 134.438349][ T5496] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.405: checksumming directory block 0 [ 134.603603][ T5512] device sit0 entered promiscuous mode [ 134.621051][ T5515] loop1: detected capacity change from 0 to 512 [ 134.631597][ T5516] loop2: detected capacity change from 0 to 128 [ 134.710891][ T5516] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 134.754575][ T5516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.863408][ T5516] binder_alloc: 5514: binder_alloc_buf, no vma [ 136.114302][ T5540] print_req_error: 2 callbacks suppressed [ 136.114318][ T5540] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.131522][ T5540] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.142940][ T5540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 136.154647][ T5540] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.166118][ T5540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 136.175834][ T5540] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 136.183606][ T5540] UDF-fs: Scanning with blocksize 512 failed [ 136.192324][ T5540] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.208404][ T5540] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.219734][ T5540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 136.230246][ T5540] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.241641][ T5540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 136.251323][ T5540] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 136.259213][ T5540] UDF-fs: Scanning with blocksize 1024 failed [ 136.275634][ T5540] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.289943][ T5540] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.301655][ T5540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 136.313661][ T5540] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.325514][ T5540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 136.335464][ T5540] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 136.343350][ T5540] UDF-fs: Scanning with blocksize 2048 failed [ 136.351502][ T5540] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.363950][ T5540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 136.374372][ T5540] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 136.384086][ T5540] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 136.391838][ T5540] UDF-fs: Scanning with blocksize 4096 failed [ 136.398044][ T5540] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 136.774610][ T5537] tap0: tun_chr_ioctl cmd 1074025672 [ 136.791364][ T5537] tap0: ignored: set checksum enabled [ 137.100408][ T5550] loop0: detected capacity change from 0 to 256 [ 137.241901][ T5557] loop2: detected capacity change from 0 to 128 [ 137.392917][ T5557] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 137.465818][ T5557] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.520260][ T5566] loop0: detected capacity change from 0 to 512 [ 137.719918][ T5570] Zero length message leads to an empty skb [ 138.163947][ T5572] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.425: No space for directory leaf checksum. Please run e2fsck -D. [ 138.250559][ T4289] udevd[4289]: incorrect ext4 checksum on /dev/loop2 [ 138.413232][ T5572] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.425: checksumming directory block 0 [ 139.621697][ T5592] loop3: detected capacity change from 0 to 256 [ 140.286377][ T5609] loop1: detected capacity change from 0 to 512 [ 142.015961][ T5631] loop0: detected capacity change from 0 to 256 [ 143.031372][ T5640] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.365708][ T5644] print_req_error: 2 callbacks suppressed [ 143.365723][ T5644] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.382905][ T5644] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.394167][ T5644] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 143.404018][ T5644] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.415275][ T5644] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 143.424881][ T5644] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 143.432570][ T5644] UDF-fs: Scanning with blocksize 512 failed [ 143.439177][ T5644] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.451247][ T5644] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.463485][ T5644] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 143.473444][ T5644] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.484675][ T5644] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 143.494355][ T5644] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 143.502089][ T5644] UDF-fs: Scanning with blocksize 1024 failed [ 143.508700][ T5644] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.519942][ T5644] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.531254][ T5644] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 143.541039][ T5644] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.552557][ T5644] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 143.562840][ T5644] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 143.570511][ T5644] UDF-fs: Scanning with blocksize 2048 failed [ 143.577056][ T5644] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 143.588910][ T5644] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 143.598957][ T5644] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 143.608606][ T5644] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 143.616313][ T5644] UDF-fs: Scanning with blocksize 4096 failed [ 143.622533][ T5644] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 143.738800][ T5651] loop0: detected capacity change from 0 to 512 [ 144.445458][ T5651] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.688126][ T5651] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.853551][ T5651] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.456: corrupted inode contents [ 144.937537][ T5651] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz.0.456: mark_inode_dirty error [ 145.024346][ T5651] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.456: corrupted inode contents [ 145.068318][ T5651] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.456: mark_inode_dirty error [ 145.178752][ T5668] loop3: detected capacity change from 0 to 512 [ 145.414337][ T5673] device syzkaller0 entered promiscuous mode [ 146.063913][ T5676] loop0: detected capacity change from 0 to 256 [ 146.350375][ T5680] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.536766][ T4554] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 148.622717][ T5716] loop1: detected capacity change from 0 to 256 [ 148.702113][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.816961][ T5718] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.912325][ T4554] usb 4-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.945907][ T4554] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.982469][ T4554] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 149.016863][ T4554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.030233][ T5721] loop0: detected capacity change from 0 to 512 [ 149.046493][ T4554] usb 4-1: config 0 descriptor?? [ 149.071016][ T5723] loop1: detected capacity change from 0 to 128 [ 149.086172][ T4554] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 149.142502][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.157502][ T5721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.482'. [ 149.176339][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.222286][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.258535][ T5723] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 149.279790][ T1108] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.289844][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.309795][ T1108] usb 3-1: config 0 descriptor?? [ 149.458223][ T5723] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.882790][ T1108] usbhid 3-1:0.0: can't add hid device: -71 [ 149.894585][ T1108] usbhid: probe of 3-1:0.0 failed with error -71 [ 150.060316][ T5723] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz.1.481: No space for directory leaf checksum. Please run e2fsck -D. [ 150.155669][ T1108] usb 3-1: USB disconnect, device number 5 [ 150.491571][ T5739] loop1: detected capacity change from 0 to 128 [ 150.546524][ T5739] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 150.897002][ T5739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.405318][ T4554] usb 4-1: USB disconnect, device number 3 [ 151.415365][ T5751] loop2: detected capacity change from 0 to 1024 [ 151.486135][ T5752] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.511627][ T5755] loop4: detected capacity change from 0 to 512 [ 151.867061][ T5761] loop3: detected capacity change from 0 to 128 [ 151.891301][ T4335] hfsplus: b-tree write err: -5, ino 3 [ 151.930335][ T5755] netlink: 56 bytes leftover after parsing attributes in process `syz.4.493'. [ 152.315304][ T5761] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 152.496074][ T5761] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.675511][ T5761] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.496: No space for directory leaf checksum. Please run e2fsck -D. [ 152.728796][ T5761] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.496: checksumming directory block 0 [ 153.739837][ T5792] loop4: detected capacity change from 0 to 1024 [ 153.941552][ T4423] hfsplus: b-tree write err: -5, ino 3 [ 153.953129][ T5800] loop1: detected capacity change from 0 to 512 [ 154.062629][ T5800] netlink: 56 bytes leftover after parsing attributes in process `syz.1.510'. [ 154.072114][ T1108] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 154.482260][ T1108] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.520727][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.557519][ T1108] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 154.597373][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.628161][ T5815] loop4: detected capacity change from 0 to 128 [ 154.640647][ T1108] usb 4-1: config 0 descriptor?? [ 154.730066][ T1108] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 154.742353][ T5815] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 154.865085][ T5815] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 154.980311][ T5815] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.516: No space for directory leaf checksum. Please run e2fsck -D. [ 155.001260][ T4309] udevd[4309]: incorrect ext4 checksum on /dev/loop4 [ 155.037764][ T5826] loop0: detected capacity change from 0 to 1024 [ 155.053519][ T5815] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.516: checksumming directory block 0 [ 155.078278][ T5830] loop2: detected capacity change from 0 to 512 [ 155.214437][ T5830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.522'. [ 155.245621][ T4336] hfsplus: b-tree write err: -5, ino 3 [ 155.427523][ T5840] loop1: detected capacity change from 0 to 4096 [ 155.491718][ T5840] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.569405][ T5859] loop2: detected capacity change from 0 to 128 [ 156.669938][ T5861] loop4: detected capacity change from 0 to 1024 [ 156.679877][ T5859] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 156.717227][ T5866] loop0: detected capacity change from 0 to 512 [ 156.724322][ T5859] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.792287][ T4226] usb 4-1: USB disconnect, device number 4 [ 156.834911][ T5859] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.534: No space for directory leaf checksum. Please run e2fsck -D. [ 156.858687][ T5859] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.534: checksumming directory block 0 [ 156.874720][ T5866] netlink: 56 bytes leftover after parsing attributes in process `syz.0.537'. [ 156.901897][ T4336] hfsplus: b-tree write err: -5, ino 3 [ 156.940591][ T4289] udevd[4289]: incorrect ext4 checksum on /dev/loop2 [ 158.055202][ T5885] loop4: detected capacity change from 0 to 1024 [ 158.112795][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.513020][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 158.691087][ T5885] hfsplus: cannot replace xattr [ 158.726522][ T7] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 158.981644][ T7] usb 2-1: config 0 has no interface number 0 [ 158.992336][ T7] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.003826][ T7] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.014369][ T7] usb 2-1: config 0 interface 85 has no altsetting 0 [ 159.412341][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 159.456669][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.454715][ T7] usb 2-1: Product: syz [ 160.459044][ T7] usb 2-1: Manufacturer: syz [ 160.464175][ T7] usb 2-1: SerialNumber: syz [ 160.742934][ T7] usb 2-1: config 0 descriptor?? [ 160.816214][ T7] usb 2-1: can't set config #0, error -71 [ 160.867927][ T7] usb 2-1: USB disconnect, device number 4 [ 160.961803][ T5908] loop1: detected capacity change from 0 to 512 [ 160.972303][ T5906] loop4: detected capacity change from 0 to 1024 [ 161.114660][ T5908] netlink: 56 bytes leftover after parsing attributes in process `syz.1.553'. [ 161.469991][ T4423] hfsplus: b-tree write err: -5, ino 3 [ 162.168878][ T5925] loop0: detected capacity change from 0 to 1024 [ 162.330168][ T5925] hfsplus: cannot replace xattr [ 163.314747][ T5936] loop3: detected capacity change from 0 to 164 [ 164.176581][ T5934] loop4: detected capacity change from 0 to 2048 [ 164.927490][ T5947] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 165.542005][ C1] sched: RT throttling activated [ 165.727728][ T5950] loop1: detected capacity change from 0 to 1024 [ 165.905219][ T5934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.010754][ T4428] hfsplus: b-tree write err: -5, ino 3 [ 166.151900][ T5960] loop3: detected capacity change from 0 to 1024 [ 166.398579][ T5960] hfsplus: cannot replace xattr [ 168.166231][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.577'. [ 168.175505][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.577'. [ 168.542162][ T4291] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 169.002561][ T4291] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.043298][ T4291] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.063504][ T4291] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 169.094100][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.176342][ T4291] usb 4-1: config 0 descriptor?? [ 169.224838][ T4291] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 169.350882][ T5988] loop4: detected capacity change from 0 to 164 [ 169.385897][ T5990] loop1: detected capacity change from 0 to 2048 [ 169.450183][ T5990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.636666][ T5998] loop0: detected capacity change from 0 to 1024 [ 169.902503][ T6005] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 170.916870][ T5998] hfsplus: cannot replace xattr [ 171.190642][ T4229] usb 4-1: USB disconnect, device number 5 [ 172.137544][ T6024] binder: BINDER_SET_CONTEXT_MGR already set [ 172.152151][ T6024] binder: 6022:6024 ioctl 4018620d 200000004a80 returned -16 [ 172.404338][ T6028] loop3: detected capacity change from 0 to 1024 [ 173.186865][ T6036] loop0: detected capacity change from 0 to 512 [ 173.196734][ T6034] loop2: detected capacity change from 0 to 2048 [ 173.268850][ T6034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.310212][ T6036] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 173.337615][ T6036] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.431426][ T6041] loop1: detected capacity change from 0 to 164 [ 173.705150][ T6047] loop2: detected capacity change from 0 to 4096 [ 173.777754][ T6047] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.842078][ T4226] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 173.914882][ T6050] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 175.158501][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.605'. [ 175.169242][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.605'. [ 175.312580][ T4226] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.170303][ T4226] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.180596][ T4226] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.304742][ T6067] binder: BINDER_SET_CONTEXT_MGR already set [ 176.367273][ T6067] binder: 6066:6067 ioctl 4018620d 200000004a80 returned -16 [ 176.482762][ T4226] usb 1-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 176.492564][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.750378][ T6076] loop0: detected capacity change from 0 to 512 [ 176.841554][ T6076] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 176.901746][ T6076] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.216970][ T4226] usb 1-1: config 0 descriptor?? [ 177.240994][ T6083] loop1: detected capacity change from 0 to 1024 [ 177.248252][ T4226] usb 1-1: can't set config #0, error -71 [ 177.273996][ T4226] usb 1-1: USB disconnect, device number 7 [ 177.355009][ T26] audit: type=1800 audit(1771906648.987:6): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.613" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 177.463088][ T6088] loop4: detected capacity change from 0 to 4096 [ 177.801305][ T6088] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.954953][ T6108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'. [ 178.964247][ T6108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'. [ 179.292697][ C1] hrtimer: interrupt took 74202 ns [ 179.762703][ T6112] loop2: detected capacity change from 0 to 512 [ 179.865522][ T6112] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 179.882098][ T5493] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 179.914794][ T6112] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.309795][ T6123] loop2: detected capacity change from 0 to 1024 [ 180.472929][ T5493] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.485159][ T5493] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.496435][ T5493] usb 4-1: config 0 interface 0 has no altsetting 0 [ 180.504915][ T5493] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 180.662631][ T5493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.774342][ T6126] loop0: detected capacity change from 0 to 128 [ 180.809036][ T26] audit: type=1800 audit(1771906652.437:7): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.626" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 180.975054][ T6126] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 181.080912][ T5493] usb 4-1: config 0 descriptor?? [ 181.095101][ T6126] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.780038][ T5493] usbhid 4-1:0.0: can't add hid device: -71 [ 181.831807][ T5493] usbhid: probe of 4-1:0.0 failed with error -71 [ 181.850832][ T6137] loop4: detected capacity change from 0 to 256 [ 181.916224][ T6137] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.995709][ T6137] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 182.113154][ T6137] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 182.491542][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 182.500497][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'. [ 183.123387][ T5493] usb 4-1: USB disconnect, device number 6 [ 183.161039][ T6146] loop1: detected capacity change from 0 to 512 [ 183.564728][ T6146] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 183.693394][ T6146] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.591837][ T6164] loop1: detected capacity change from 0 to 128 [ 184.635358][ T6164] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 184.679270][ T6164] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.304938][ T6176] loop3: detected capacity change from 0 to 128 [ 185.344081][ T6176] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 185.366505][ T6176] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.035475][ T4226] Bluetooth: hci0: command 0x0406 tx timeout [ 186.262405][ T4226] Bluetooth: hci1: command 0x0406 tx timeout [ 186.269600][ T4226] Bluetooth: hci4: command 0x0406 tx timeout [ 186.329992][ T6184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.647'. [ 186.338949][ T6184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.647'. [ 187.627300][ T4226] Bluetooth: hci3: command 0x0406 tx timeout [ 187.633451][ T4226] Bluetooth: hci2: command 0x0406 tx timeout [ 187.794627][ T6189] loop2: detected capacity change from 0 to 164 [ 187.987445][ T6191] loop4: detected capacity change from 0 to 256 [ 188.078322][ T6191] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.099290][ T6195] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 188.109046][ T6191] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 188.148820][ T6191] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 188.804984][ T6209] loop2: detected capacity change from 0 to 128 [ 188.877467][ T6209] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 188.893187][ T6209] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.123556][ T6215] loop2: detected capacity change from 0 to 512 [ 189.270645][ T6215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 189.425277][ T6215] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.585985][ T6215] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.658: corrupted inode contents [ 189.655867][ T6215] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.658: mark_inode_dirty error [ 189.755889][ T6215] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.658: corrupted inode contents [ 189.847034][ T6215] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.658: mark_inode_dirty error [ 190.370370][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'. [ 190.379366][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'. [ 191.348910][ T6232] netlink: 56 bytes leftover after parsing attributes in process `syz.3.665'. [ 191.470836][ T6240] loop1: detected capacity change from 0 to 164 [ 191.480838][ T6241] loop4: detected capacity change from 0 to 128 [ 192.103355][ T6241] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 192.121931][ T6248] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 192.442332][ T6241] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.560628][ T6250] loop3: detected capacity change from 0 to 256 [ 192.666583][ T6250] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.704652][ T6250] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 192.730303][ T6250] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 193.644481][ T6266] loop4: detected capacity change from 0 to 4096 [ 193.716666][ T6266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.880189][ T6266] EXT4-fs (loop4): shut down requested (2) [ 194.273257][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.279922][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.411265][ T6276] loop4: detected capacity change from 0 to 512 [ 195.443309][ T6278] loop2: detected capacity change from 0 to 164 [ 195.588449][ T6276] netlink: 56 bytes leftover after parsing attributes in process `syz.4.679'. [ 195.760267][ T6283] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 195.911574][ T6288] loop0: detected capacity change from 0 to 128 [ 196.018152][ T6288] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 196.041532][ T6288] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.151599][ T4309] udevd[4309]: incorrect ext4 checksum on /dev/loop0 [ 196.616809][ T6295] loop2: detected capacity change from 0 to 256 [ 196.822197][ T6295] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.888418][ T6295] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 197.245351][ T6295] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 198.762166][ T6314] loop0: detected capacity change from 0 to 512 [ 198.799047][ T6314] netlink: 56 bytes leftover after parsing attributes in process `syz.0.693'. [ 199.061946][ T6321] loop0: detected capacity change from 0 to 164 [ 199.071922][ T6323] loop2: detected capacity change from 0 to 128 [ 199.136278][ T6323] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noblock_validity,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none. [ 199.160926][ T6323] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.459218][ T6326] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 200.749654][ T6337] loop1: detected capacity change from 0 to 128 [ 200.873620][ T6337] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 200.934071][ T6346] loop3: detected capacity change from 0 to 512 [ 200.952056][ T4554] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 200.989506][ T6337] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.034831][ T6346] netlink: 56 bytes leftover after parsing attributes in process `syz.3.706'. [ 201.235677][ T6353] loop4: detected capacity change from 0 to 164 [ 201.250219][ T6348] loop3: detected capacity change from 0 to 1024 [ 201.312629][ T4554] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.346774][ T4554] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.372048][ T4554] usb 3-1: config 0 interface 0 has no altsetting 0 [ 201.625333][ T6358] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 201.660663][ T4554] usb 3-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 201.677286][ T4554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.022522][ T6348] loop3: detected capacity change from 1024 to 64 [ 202.383017][ T4554] usb 3-1: config 0 descriptor?? [ 203.184132][ T4554] usbhid 3-1:0.0: can't add hid device: -71 [ 204.562069][ T4554] usbhid: probe of 3-1:0.0 failed with error -71 [ 205.597183][ T4554] usb 3-1: USB disconnect, device number 6 [ 205.686000][ T6373] loop2: detected capacity change from 0 to 128 [ 205.783876][ T6379] usb usb8: usbfs: process 6379 (syz.4.718) did not claim interface 5 before use [ 205.819452][ T6379] loop4: detected capacity change from 0 to 512 [ 205.832253][ T6373] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 205.862323][ T6373] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.946834][ T6379] netlink: 56 bytes leftover after parsing attributes in process `syz.4.718'. [ 206.053691][ T6385] loop0: detected capacity change from 0 to 256 [ 206.122718][ T6387] loop2: detected capacity change from 0 to 164 [ 206.257520][ T6385] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.307715][ T6385] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 206.373395][ T6387] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 206.411219][ T6385] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 207.686564][ T6411] loop1: detected capacity change from 0 to 512 [ 207.862508][ T6411] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.892125][ T4226] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 207.953725][ T6411] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.046064][ T6411] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.730: corrupted inode contents [ 208.097911][ T6411] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.730: mark_inode_dirty error [ 208.128324][ T6411] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.730: corrupted inode contents [ 208.198945][ T6411] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.730: mark_inode_dirty error [ 208.312274][ T4226] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.343351][ T4226] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.372108][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.379336][ T4226] usb 3-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 208.417515][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.456032][ T4226] usb 3-1: config 0 descriptor?? [ 208.676372][ T6421] usb usb8: usbfs: process 6421 (syz.1.732) did not claim interface 5 before use [ 208.723280][ T6421] loop1: detected capacity change from 0 to 512 [ 208.827902][ T6421] netlink: 56 bytes leftover after parsing attributes in process `syz.1.732'. [ 209.212117][ T4226] usbhid 3-1:0.0: can't add hid device: -71 [ 209.228205][ T4226] usbhid: probe of 3-1:0.0 failed with error -71 [ 210.720324][ T4226] usb 3-1: USB disconnect, device number 7 [ 210.791142][ T6438] loop0: detected capacity change from 0 to 256 [ 210.944723][ T6442] loop4: detected capacity change from 0 to 1024 [ 210.973387][ T6438] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.022112][ T6438] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 211.065832][ T6447] loop3: detected capacity change from 0 to 512 [ 211.069887][ T6438] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 211.225120][ T6447] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.302251][ T6447] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.351559][ T6447] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.741: corrupted inode contents [ 211.408246][ T6447] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #2: comm syz.3.741: mark_inode_dirty error [ 211.451044][ T6447] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.741: corrupted inode contents [ 211.491188][ T6447] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.741: mark_inode_dirty error [ 211.538210][ T6460] usb usb8: usbfs: process 6460 (syz.0.745) did not claim interface 5 before use [ 211.628413][ T6460] loop0: detected capacity change from 0 to 512 [ 211.684876][ T6460] netlink: 56 bytes leftover after parsing attributes in process `syz.0.745'. [ 211.694911][ T6462] loop4: detected capacity change from 0 to 1024 [ 211.803673][ T6462] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.160144][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 212.169180][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.749'. [ 213.149552][ T4554] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 213.527893][ T4554] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.559374][ T4554] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.589814][ T4554] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.620203][ T4554] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 213.650575][ T4554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.681868][ T4554] usb 4-1: config 0 descriptor?? [ 213.844228][ T6485] loop2: detected capacity change from 0 to 164 [ 214.128831][ T6485] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 214.263534][ T6488] loop1: detected capacity change from 0 to 1024 [ 214.314896][ T6490] loop2: detected capacity change from 0 to 256 [ 214.389978][ T6490] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.411107][ T6490] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 214.448785][ T6490] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 214.482213][ T4554] usbhid 4-1:0.0: can't add hid device: -71 [ 214.498492][ T4554] usbhid: probe of 4-1:0.0 failed with error -71 [ 214.539045][ T4554] usb 4-1: USB disconnect, device number 7 [ 214.671163][ T6493] loop1: detected capacity change from 0 to 256 [ 214.717068][ T6494] loop2: detected capacity change from 0 to 512 [ 214.764014][ T6493] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 214.797097][ T6494] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.820117][ T6493] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 214.823991][ T6494] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.890592][ T6494] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.757: corrupted inode contents [ 214.972598][ T6494] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.757: mark_inode_dirty error [ 215.014605][ T6499] loop0: detected capacity change from 0 to 512 [ 215.033521][ T6494] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.757: corrupted inode contents [ 215.094040][ T6498] netlink: 56 bytes leftover after parsing attributes in process `syz.0.758'. [ 215.248012][ T6494] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.757: mark_inode_dirty error [ 215.935339][ T6508] FAT-fs (loop4): Directory bread(block 64) failed [ 216.145587][ T6508] FAT-fs (loop4): Directory bread(block 65) failed [ 216.293975][ T6508] FAT-fs (loop4): Directory bread(block 66) failed [ 216.300585][ T6508] FAT-fs (loop4): Directory bread(block 67) failed [ 216.335817][ T6508] FAT-fs (loop4): Directory bread(block 68) failed [ 216.379800][ T6508] FAT-fs (loop4): Directory bread(block 69) failed [ 216.402216][ T6508] FAT-fs (loop4): Directory bread(block 70) failed [ 216.417451][ T6519] set_capacity_and_notify: 1 callbacks suppressed [ 216.417468][ T6519] loop2: detected capacity change from 0 to 164 [ 216.430661][ T6508] FAT-fs (loop4): Directory bread(block 71) failed [ 216.437480][ T6508] FAT-fs (loop4): Directory bread(block 72) failed [ 216.450763][ T6508] FAT-fs (loop4): Directory bread(block 73) failed [ 216.524873][ T6522] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 216.896402][ T6524] loop4: detected capacity change from 0 to 4096 [ 216.985659][ T6524] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.047615][ T6524] EXT4-fs (loop4): shut down requested (2) [ 217.233163][ T6527] loop4: detected capacity change from 0 to 256 [ 217.284805][ T6527] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.326642][ T6527] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 217.377913][ T6527] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 219.412917][ T4225] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 219.613839][ T6551] loop0: detected capacity change from 0 to 512 [ 219.654373][ T6553] loop2: detected capacity change from 0 to 4096 [ 219.709965][ T6553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.770680][ T6551] netlink: 56 bytes leftover after parsing attributes in process `syz.0.775'. [ 219.843503][ T4225] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.903199][ T4225] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.270895][ T6567] loop0: detected capacity change from 0 to 1024 [ 220.330618][ T4225] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.337598][ T4225] usb 5-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 220.347132][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.359225][ T4225] usb 5-1: config 0 descriptor?? [ 220.432492][ T6567] loop_set_status: loop0 () has still dirty pages (nrpages=3) [ 220.484965][ T6574] loop1: detected capacity change from 0 to 256 [ 220.527454][ T6574] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.597922][ T6574] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 220.672234][ T4225] usbhid 5-1:0.0: can't add hid device: -71 [ 220.678413][ T4225] usbhid: probe of 5-1:0.0 failed with error -71 [ 220.692099][ T6574] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 220.735670][ T4225] usb 5-1: USB disconnect, device number 4 [ 220.891228][ T6581] loop4: detected capacity change from 0 to 512 [ 221.006226][ T6579] loop0: detected capacity change from 0 to 8192 [ 221.025012][ T6581] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.059631][ T6581] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.166821][ T6579] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.206998][ T6581] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #2: comm syz.4.785: corrupted inode contents [ 221.257240][ T26] audit: type=1800 audit(1771906692.887:8): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.783" name="file2" dev="loop0" ino=1048639 res=0 errno=0 [ 221.297589][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.372723][ T6579] FAT-fs (loop0): Filesystem has been set read-only [ 221.380273][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.462179][ T6581] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #2: comm syz.4.785: mark_inode_dirty error [ 221.563698][ T6581] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #2: comm syz.4.785: corrupted inode contents [ 221.612298][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.675336][ T6581] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.785: mark_inode_dirty error [ 221.691394][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.771361][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.878811][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 221.961644][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.042825][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.138814][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.198549][ T6579] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 222.386192][ T6592] loop4: detected capacity change from 0 to 512 [ 222.562884][ T6597] loop1: detected capacity change from 0 to 512 [ 222.599768][ T6592] EXT4-fs (loop4): Ignoring removed nobh option [ 222.640389][ T6592] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 222.758720][ T6592] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.787: invalid indirect mapped block 256 (level 1) [ 222.993360][ T6597] netlink: 56 bytes leftover after parsing attributes in process `syz.1.790'. [ 223.096939][ T6592] EXT4-fs (loop4): Remounting filesystem read-only [ 223.277013][ T6592] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.787: invalid indirect mapped block 2683928664 (level 1) [ 223.452704][ T6592] EXT4-fs (loop4): Remounting filesystem read-only [ 223.472527][ T6592] EXT4-fs (loop4): 1 truncate cleaned up [ 223.478241][ T6592] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,nouid32,nobh,nodioread_nolock,discard,usrjquota=.noacl,errors=remount-ro,jqfmt=vfsv0,auto_da_alloc,,. Quota mode: writeback. [ 223.709875][ T6592] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 13: comm syz.4.787: lblock 0 mapped to illegal pblock 13 (length 1) [ 223.770095][ T6603] loop1: detected capacity change from 0 to 4096 [ 223.789926][ T6592] EXT4-fs (loop4): Remounting filesystem read-only [ 223.871068][ T6603] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.314591][ T6611] loop2: detected capacity change from 0 to 1024 [ 224.882336][ T6611] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 225.432518][ T6623] loop3: detected capacity change from 0 to 512 [ 225.492555][ T4226] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 225.528584][ T6625] loop2: detected capacity change from 0 to 128 [ 225.551909][ T6623] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.582420][ T6623] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.608400][ T6623] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.798: corrupted inode contents [ 225.631439][ T6623] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #2: comm syz.3.798: mark_inode_dirty error [ 225.633008][ T6625] EXT4-fs (loop2): Ignoring removed nobh option [ 225.665607][ T6623] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.798: corrupted inode contents [ 225.678601][ T6623] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.798: mark_inode_dirty error [ 225.694963][ T6625] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 225.709479][ T6625] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.878661][ T6633] loop0: detected capacity change from 0 to 512 [ 225.912292][ T26] audit: type=1400 audit(1771906697.537:9): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6634 comm="syz.3.802" [ 225.931297][ T6635] loop3: detected capacity change from 0 to 512 [ 225.942083][ T4226] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.956591][ T4226] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.971554][ T4226] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.979943][ T4226] usb 2-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 225.993521][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.023272][ T4226] usb 2-1: config 0 descriptor?? [ 226.030247][ T6633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.801'. [ 226.059749][ T6635] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.802: inode has both inline data and extents flags [ 226.088841][ T6635] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.802: couldn't read orphan inode 15 (err -117) [ 226.112303][ T6635] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.390316][ T4229] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 226.782678][ T4226] usbhid 2-1:0.0: can't add hid device: -71 [ 226.790410][ T4226] usbhid: probe of 2-1:0.0 failed with error -71 [ 226.914305][ T4226] usb 2-1: USB disconnect, device number 5 [ 227.280078][ T6648] loop4: detected capacity change from 0 to 1024 [ 227.392207][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 227.410145][ T6650] loop3: detected capacity change from 0 to 4096 [ 227.412896][ T6648] loop_set_status: loop4 () has still dirty pages (nrpages=2) [ 227.512126][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.526151][ T6650] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.601686][ T4229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.715484][ T6660] loop1: detected capacity change from 0 to 128 [ 227.810300][ T4229] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.819884][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.841649][ T6660] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 227.865155][ T6660] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.885584][ T4229] usb 3-1: config 0 descriptor?? [ 228.024902][ T4229] hub 3-1:0.0: USB hub found [ 228.242675][ T4229] hub 3-1:0.0: 1 port detected [ 228.814606][ T6671] loop1: detected capacity change from 0 to 512 [ 228.814629][ T6669] netlink: 56 bytes leftover after parsing attributes in process `syz.3.814'. [ 228.882174][ T4229] hub 3-1:0.0: activate --> -90 [ 228.900452][ T6671] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.961768][ T6678] loop3: detected capacity change from 0 to 128 [ 228.966622][ T6671] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.000521][ T6671] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.813: corrupted inode contents [ 229.013786][ T6678] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.024544][ T6671] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.813: mark_inode_dirty error [ 229.046106][ T6671] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.813: corrupted inode contents [ 229.060939][ T6671] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.813: mark_inode_dirty error [ 229.077716][ T6678] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.147720][ T4193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 229.163390][ T4193] FAT-fs (loop3): Filesystem has been set read-only [ 229.207766][ T4193] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 229.296701][ T5493] usb 3-1: USB disconnect, device number 8 [ 230.196727][ T6688] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 230.358279][ T6696] loop2: detected capacity change from 0 to 128 [ 230.387763][ T6694] loop1: detected capacity change from 0 to 1024 [ 230.403522][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.517560][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.518525][ T6696] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 230.552609][ T6694] loop_set_status: loop1 () has still dirty pages (nrpages=1) [ 230.588993][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.602192][ T6696] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.819525][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.840266][ T6706] loop1: detected capacity change from 0 to 512 [ 230.852683][ T6707] loop4: detected capacity change from 0 to 512 [ 230.938866][ T6707] netlink: 56 bytes leftover after parsing attributes in process `syz.4.827'. [ 230.988488][ T6706] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.052263][ T6706] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.132336][ T6706] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.828: corrupted inode contents [ 231.178962][ T6706] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.828: mark_inode_dirty error [ 231.327545][ T6706] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.828: corrupted inode contents [ 231.367840][ T6706] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.828: mark_inode_dirty error [ 231.565396][ T6705] chnl_net:caif_netlink_parms(): no params data found [ 232.735154][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.742537][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.751452][ T6705] device bridge_slave_0 entered promiscuous mode [ 232.761032][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.768570][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.777166][ T6705] device bridge_slave_1 entered promiscuous mode [ 232.834102][ T6747] loop1: detected capacity change from 0 to 128 [ 232.908454][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 232.918144][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.082300][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.091665][ T21] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 233.114145][ T6747] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 233.159428][ T6747] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.879938][ T6705] team0: Port device team_slave_0 added [ 233.929376][ T6705] team0: Port device team_slave_1 added [ 234.009409][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.057458][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.106109][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.144567][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.151713][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.201129][ T6762] loop2: detected capacity change from 0 to 512 [ 234.252369][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.295072][ T21] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.315148][ T21] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.327359][ T6762] netlink: 56 bytes leftover after parsing attributes in process `syz.2.838'. [ 234.349640][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.363096][ T21] usb 1-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 234.378180][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.425778][ T21] usb 1-1: config 0 descriptor?? [ 234.527192][ T6771] loop2: detected capacity change from 0 to 512 [ 234.553574][ T6705] device hsr_slave_0 entered promiscuous mode [ 234.567240][ T6705] device hsr_slave_1 entered promiscuous mode [ 234.577475][ T6705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.595970][ T6705] Cannot create hsr debugfs directory [ 234.630354][ T6771] EXT4-fs (loop2): Ignoring removed oldalloc option [ 234.642788][ T6771] EXT4-fs (loop2): old and new quota format mixing [ 234.982660][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 235.153010][ T9] device hsr_slave_0 left promiscuous mode [ 235.162202][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 235.170393][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 235.195713][ T21] usb 1-1: USB disconnect, device number 8 [ 235.231589][ T9] device hsr_slave_1 left promiscuous mode [ 235.244398][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.267839][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.286597][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.299527][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.314315][ T9] device bridge_slave_1 left promiscuous mode [ 235.326822][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.358688][ T9] device bridge_slave_0 left promiscuous mode [ 235.365220][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.398763][ T9] device veth1_macvtap left promiscuous mode [ 235.406674][ T9] device veth0_macvtap left promiscuous mode [ 235.413889][ T9] device veth1_vlan left promiscuous mode [ 235.420089][ T9] device veth0_vlan left promiscuous mode [ 235.795053][ T9] team0 (unregistering): Port device team_slave_1 removed [ 235.916249][ T9] team0 (unregistering): Port device team_slave_0 removed [ 235.992956][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.082489][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.412680][ T9] bond0 (unregistering): Released all slaves [ 236.759068][ T6705] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.152804][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 237.167573][ T6705] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.235936][ T6705] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.301810][ T6705] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.302232][ T5493] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 237.454437][ T6806] loop4: detected capacity change from 0 to 4096 [ 237.508572][ T6806] EXT4-fs (loop4): inline encryption not supported [ 237.525972][ T6806] EXT4-fs (loop4): Test dummy encryption mode enabled [ 237.550754][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.581984][ T6806] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 237.596095][ T6806] System zones: 0-5 [ 237.605680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.614031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.631859][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.639350][ T6806] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 237.692509][ T5493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.715515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.730838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.741001][ T5493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.799241][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.806435][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.828708][ T5493] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.874173][ T5493] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.910254][ T5493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.962385][ T5493] usb 2-1: config 0 descriptor?? [ 237.976980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.037496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.097179][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.104409][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.275165][ T6705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.317209][ T6705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.331802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.383142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.444108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.473194][ T6826] loop4: detected capacity change from 0 to 128 [ 238.481843][ T5493] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 238.512966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.525124][ T6825] loop0: detected capacity change from 0 to 512 [ 238.533091][ T5493] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 238.540578][ T5493] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 238.555058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.573091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.581786][ T5493] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 238.596016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.604380][ T5493] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 238.613077][ T6826] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 238.633273][ T6826] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.644709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.659870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.669221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.683110][ T5493] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 238.687976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.699832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.708343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.725962][ T6825] netlink: 56 bytes leftover after parsing attributes in process `syz.0.849'. [ 238.809496][ T6832] capability: warning: `syz.2.850' uses 32-bit capabilities (legacy support in use) [ 238.862861][ T5493] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 238.954236][ T5493] usb 2-1: USB disconnect, device number 6 [ 239.916478][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 240.042144][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.058483][ T6840] fido_id[6840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 240.089888][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.129061][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.282131][ T5493] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 240.370068][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 240.652901][ T5493] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.752761][ T5493] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.930354][ T5493] usb 2-1: config 0 interface 0 has no altsetting 0 [ 241.065576][ T5493] usb 2-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 241.172146][ T5493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.212429][ T5493] usb 2-1: config 0 descriptor?? [ 241.348178][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 241.437186][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.451001][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.483693][ T21] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.520615][ T21] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.545570][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.547991][ T21] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 241.568611][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.569459][ T21] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.583784][ T21] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 241.593582][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.603497][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.621402][ T21] usb 5-1: config 0 descriptor?? [ 241.627814][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.647240][ T6705] device veth0_vlan entered promiscuous mode [ 241.684179][ T6705] device veth1_vlan entered promiscuous mode [ 241.724012][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.739385][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.748443][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.758889][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.771473][ T6705] device veth0_macvtap entered promiscuous mode [ 241.785631][ T6705] device veth1_macvtap entered promiscuous mode [ 241.829223][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.846268][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.857869][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.875397][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.888159][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.907427][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.929112][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.947106][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.958935][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.970955][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.981889][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.003344][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.032243][ T5493] usbhid 2-1:0.0: can't add hid device: -71 [ 242.040475][ T5493] usbhid: probe of 2-1:0.0 failed with error -71 [ 242.061864][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.118784][ T5493] usb 2-1: USB disconnect, device number 7 [ 242.133497][ T21] hid (null): nested delimiters [ 242.152111][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.172821][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.222034][ T6705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.242290][ T6705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.296383][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.319369][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.340213][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.343410][ T21] usb 5-1: USB disconnect, device number 5 [ 242.362332][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 242.374493][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.398983][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.429108][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.440281][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.501459][ T6705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.595567][ T6705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.636147][ T6705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.677083][ T6705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.698302][ T6893] loop1: detected capacity change from 0 to 128 [ 242.764811][ T6893] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 242.892232][ T6893] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.010477][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.062267][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.100375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.177099][ T6901] loop4: detected capacity change from 0 to 512 [ 243.193479][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.201675][ T6904] loop0: detected capacity change from 0 to 164 [ 243.227611][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.275295][ T704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.483839][ T6901] netlink: 56 bytes leftover after parsing attributes in process `syz.4.861'. [ 243.617365][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 243.863487][ T6910] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 245.850439][ T6935] loop0: detected capacity change from 0 to 16 [ 245.872330][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.892316][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.909693][ T6935] erofs: (device loop0): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 245.934209][ T6933] loop5: detected capacity change from 0 to 1024 [ 245.949695][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.970104][ T6935] erofs: (device loop0): mounted with root inode @ nid 36. [ 245.988094][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.034363][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.084119][ T7] usb 2-1: config 0 descriptor?? [ 246.134129][ T6942] attempt to access beyond end of device [ 246.134129][ T6942] loop0: rw=0, want=34359738368, limit=16 [ 246.386265][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 246.399202][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 246.420426][ T7] usb 2-1: USB disconnect, device number 8 [ 246.452257][ T4225] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 246.750938][ T6937] loop4: detected capacity change from 0 to 40427 [ 246.805183][ T6937] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 246.848619][ T6937] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 246.857697][ T4225] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.884291][ T4225] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.936107][ T6937] F2FS-fs (loop4): invalid crc value [ 246.945784][ T4225] usb 6-1: config 0 interface 0 has no altsetting 0 [ 246.976128][ T4225] usb 6-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 247.001415][ T6937] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 247.033297][ T4225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.135052][ T4225] usb 6-1: config 0 descriptor?? [ 247.197654][ T6952] loop1: detected capacity change from 0 to 40427 [ 247.252843][ T6952] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 247.334770][ T6952] F2FS-fs (loop1): invalid crc value [ 247.364630][ T6937] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 247.377159][ T6937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 247.390787][ T6952] F2FS-fs (loop1): Found nat_bits in checkpoint [ 247.455358][ T6971] loop0: detected capacity change from 0 to 128 [ 247.518128][ T6937] attempt to access beyond end of device [ 247.518128][ T6937] loop4: rw=2049, want=53256, limit=40427 [ 247.658351][ T6971] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 247.683926][ T4185] attempt to access beyond end of device [ 247.683926][ T4185] loop4: rw=2049, want=45104, limit=40427 [ 247.688280][ T6952] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 247.736300][ T6971] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.758463][ T6980] loop2: detected capacity change from 0 to 512 [ 247.821139][ T6980] netlink: 56 bytes leftover after parsing attributes in process `syz.2.874'. [ 247.892192][ T4225] usbhid 6-1:0.0: can't add hid device: -71 [ 247.908593][ T4225] usbhid: probe of 6-1:0.0 failed with error -71 [ 247.964858][ T4225] usb 6-1: USB disconnect, device number 2 [ 248.841888][ T6992] loop0: detected capacity change from 0 to 256 [ 248.926805][ T6993] binder: 6990:6993 ioctl 4018620d 0 returned -22 [ 248.992779][ T6992] FAT-fs (loop0): Directory bread(block 64) failed [ 249.136739][ T6992] FAT-fs (loop0): Directory bread(block 65) failed [ 249.445639][ T6992] FAT-fs (loop0): Directory bread(block 66) failed [ 249.724508][ T6992] FAT-fs (loop0): Directory bread(block 67) failed [ 249.822160][ T6992] FAT-fs (loop0): Directory bread(block 68) failed [ 249.862772][ T6992] FAT-fs (loop0): Directory bread(block 69) failed [ 249.869463][ T6992] FAT-fs (loop0): Directory bread(block 70) failed [ 249.877656][ T6992] FAT-fs (loop0): Directory bread(block 71) failed [ 249.877842][ T6952] attempt to access beyond end of device [ 249.877842][ T6952] loop1: rw=2049, want=45112, limit=40427 [ 249.902145][ T6992] FAT-fs (loop0): Directory bread(block 72) failed [ 249.908803][ T6992] FAT-fs (loop0): Directory bread(block 73) failed [ 250.030215][ T7002] loop5: detected capacity change from 0 to 1024 [ 250.219343][ T7009] loop4: detected capacity change from 0 to 2048 [ 250.247805][ T4554] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 250.460678][ T7009] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.515491][ T7009] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.732204][ T4554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.752177][ T4554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.789817][ T4554] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.797246][ T7037] loop4: detected capacity change from 0 to 512 [ 251.843912][ T7037] netlink: 56 bytes leftover after parsing attributes in process `syz.4.886'. [ 251.855919][ T4554] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.880540][ T4554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.939144][ T4554] usb 3-1: config 0 descriptor?? [ 254.083370][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'. [ 254.102100][ T4554] usbhid 3-1:0.0: can't add hid device: -71 [ 254.108127][ T4554] usbhid: probe of 3-1:0.0 failed with error -71 [ 254.116602][ T4554] usb 3-1: USB disconnect, device number 9 [ 254.143999][ T7067] loop4: detected capacity change from 0 to 1024 [ 254.438951][ T7077] loop5: detected capacity change from 0 to 256 [ 254.602041][ T7077] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 254.671247][ T7080] loop4: detected capacity change from 0 to 512 [ 254.768074][ T7080] netlink: 56 bytes leftover after parsing attributes in process `syz.4.899'. [ 255.010449][ T7089] binder: BINDER_SET_CONTEXT_MGR already set [ 255.038876][ T7089] binder: 7088:7089 ioctl 4018620d 200000004a80 returned -16 [ 256.033292][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.039720][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.309547][ T7076] loop2: detected capacity change from 0 to 40427 [ 257.337914][ T7076] F2FS-fs (loop2): invalid crc value [ 257.378132][ T7076] F2FS-fs (loop2): Found nat_bits in checkpoint [ 257.552060][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 257.561720][ T7076] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 257.763868][ T7125] loop4: detected capacity change from 0 to 256 [ 257.864389][ T7125] FAT-fs (loop4): Directory bread(block 64) failed [ 257.881224][ T7125] FAT-fs (loop4): Directory bread(block 65) failed [ 257.911415][ T7125] FAT-fs (loop4): Directory bread(block 66) failed [ 257.922195][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.928557][ T7125] FAT-fs (loop4): Directory bread(block 67) failed [ 257.957599][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.965580][ T7125] FAT-fs (loop4): Directory bread(block 68) failed [ 257.997705][ T7] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 258.002130][ T7125] FAT-fs (loop4): Directory bread(block 69) failed [ 258.053111][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.067976][ T7125] FAT-fs (loop4): Directory bread(block 70) failed [ 258.082814][ T7] usb 6-1: config 0 descriptor?? [ 258.113211][ T7125] FAT-fs (loop4): Directory bread(block 71) failed [ 258.119891][ T7125] FAT-fs (loop4): Directory bread(block 72) failed [ 258.157063][ T7125] FAT-fs (loop4): Directory bread(block 73) failed [ 258.164614][ T7132] loop2: detected capacity change from 0 to 512 [ 258.282382][ T7132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 258.388994][ T7132] EXT4-fs (loop2): 1 truncate cleaned up [ 258.430929][ T7132] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 258.661272][ T7143] loop0: detected capacity change from 0 to 256 [ 258.709740][ T7145] loop2: detected capacity change from 0 to 128 [ 258.766296][ T7111] udc-core: couldn't find an available UDC or it's busy [ 258.773500][ T7111] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 258.780778][ T7143] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 258.889742][ T7145] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 258.968574][ T7145] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.257277][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 261.264187][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 261.272777][ T7] usb 6-1: USB disconnect, device number 3 [ 261.610506][ T7190] loop4: detected capacity change from 0 to 128 [ 261.759281][ T7190] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 261.776527][ T7] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 261.790578][ T7190] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.792192][ T4225] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 262.142534][ T4225] usb 1-1: Using ep0 maxpacket: 16 [ 262.182686][ T7] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.421435][ T4225] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.516392][ T4225] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.637858][ T4225] usb 1-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.00 [ 262.760375][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.976736][ T7] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.987428][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 263.002235][ T7] usb 6-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 263.037785][ T4225] usb 1-1: config 0 descriptor?? [ 263.050895][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.073586][ T7] usb 6-1: config 0 descriptor?? [ 263.302132][ T4554] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 263.814818][ T4554] usb 5-1: Using ep0 maxpacket: 16 [ 263.827730][ T4225] wacom 0003:056A:00D7.0003: Unknown device_type for 'HID 056a:00d7'. Assuming pen. [ 263.895488][ T4225] wacom 0003:056A:00D7.0003: hidraw0: USB HID v0.05 Device [HID 056a:00d7] on usb-dummy_hcd.0-1/input0 [ 263.916289][ T4225] input: Wacom BambooPT 2FG Small Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D7.0003/input/input8 [ 263.942488][ T4554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.972157][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 263.979617][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 263.992080][ T4554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.019536][ T4225] usb 1-1: USB disconnect, device number 9 [ 264.048928][ T7] usb 6-1: USB disconnect, device number 4 [ 264.062099][ T4554] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 264.108130][ T4554] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 264.129877][ T4554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.151097][ T4554] usb 5-1: config 0 descriptor?? [ 264.328596][ T7228] fido_id[7228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 264.986500][ T7200] udc-core: couldn't find an available UDC or it's busy [ 265.057614][ T7200] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 265.495212][ T7245] Illegal XDP return value 22900792, expect packet loss! [ 267.357852][ T7270] loop4: detected capacity change from 0 to 512 [ 267.372116][ T4554] usbhid 5-1:0.0: can't add hid device: -71 [ 267.378160][ T4554] usbhid: probe of 5-1:0.0 failed with error -71 [ 267.508045][ T7276] loop5: detected capacity change from 0 to 256 [ 267.585457][ T4554] usb 5-1: USB disconnect, device number 6 [ 267.625536][ T7276] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.648897][ T7276] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 267.990626][ T7270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.116407][ T7276] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 268.242149][ T7270] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.439285][ T7287] loop2: detected capacity change from 0 to 1024 [ 268.634891][ T7287] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 268.654141][ T7287] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.908422][ T7287] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 269.047102][ T7287] System zones: 0-1, 3-36 [ 269.291764][ T7287] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,usrjquota=,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 269.647087][ T7311] TCP: TCP_TX_DELAY enabled [ 270.080294][ T7335] loop0: detected capacity change from 0 to 128 [ 270.155720][ T7335] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 270.291919][ T7335] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.539766][ T7348] loop2: detected capacity change from 0 to 512 [ 270.818473][ T7348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.116400][ T7348] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.859742][ T7371] loop0: detected capacity change from 0 to 512 [ 271.898197][ T7371] EXT4-fs (loop0): Ignoring removed orlov option [ 271.905220][ T7373] loop2: detected capacity change from 0 to 256 [ 271.932125][ T7371] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 271.971125][ T7371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 271.988600][ T7371] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.972: corrupted in-inode xattr [ 272.028924][ T7373] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.094951][ T7371] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.972: couldn't read orphan inode 15 (err -117) [ 272.139558][ T7373] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 272.151022][ T7371] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000603,inode_readahead_blks=0x0000000004000000,errors=continue,,errors=continue. Quota mode: none. [ 272.195547][ T7373] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 272.428943][ T7388] loop2: detected capacity change from 0 to 512 [ 272.523186][ T7388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 272.561208][ T7388] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 272.600785][ T7388] EXT4-fs (loop2): 1 truncate cleaned up [ 272.645996][ T7388] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 272.741236][ T7402] loop5: detected capacity change from 0 to 512 [ 273.265710][ T7402] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.583419][ T7402] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.785584][ T7425] loop2: detected capacity change from 0 to 1024 [ 274.902833][ T7433] loop4: detected capacity change from 0 to 128 [ 284.123635][ T26] audit: type=1800 audit(1771906755.757:10): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.986" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 284.326744][ T7446] loop4: detected capacity change from 0 to 512 [ 284.493934][ T7446] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 284.573950][ T7446] EXT4-fs (loop4): 1 truncate cleaned up [ 284.579689][ T7446] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 284.890228][ T7469] loop5: detected capacity change from 0 to 256 [ 284.966119][ T7469] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.051476][ T7469] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 285.676817][ T7469] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 286.203816][ T7452] loop0: detected capacity change from 0 to 40427 [ 286.603877][ T7452] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 286.827923][ T7452] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 287.094306][ T7452] F2FS-fs (loop0): invalid crc value [ 287.145716][ T7452] F2FS-fs (loop0): Found nat_bits in checkpoint [ 287.362577][ T7499] loop4: detected capacity change from 0 to 16 [ 287.384130][ T7452] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 287.393296][ T7452] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 287.452402][ T7499] erofs: (device loop4): mounted with root inode @ nid 36. [ 287.704195][ T7499] attempt to access beyond end of device [ 287.704195][ T7499] loop4: rw=524288, want=524304, limit=16 [ 287.783003][ T4189] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4100] [ 287.952276][ T4554] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 288.087466][ T7499] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -5 in[4096, 0] out[4096] [ 288.362507][ T4554] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.441185][ T4554] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.593132][ T4554] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.700542][ T26] audit: type=1800 audit(1771906760.167:11): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1004" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 288.761031][ T4554] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.804438][ T4554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.868116][ T4554] usb 6-1: config 0 descriptor?? [ 289.288789][ T7521] loop0: detected capacity change from 0 to 512 [ 290.128617][ T4554] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 290.140092][ T4554] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 290.147841][ T4554] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 290.155425][ T4554] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 290.164417][ T4554] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 290.172667][ T4554] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 290.197865][ T4554] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 290.204590][ T7521] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 290.225107][ T7521] ext4 filesystem being mounted at /197/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.342153][ T7535] ODEBUG: Out of memory. ODEBUG disabled [ 292.391222][ T4554] usb 6-1: USB disconnect, device number 5 [ 294.421085][ T7554] fido_id[7554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 294.462342][ T7558] loop5: detected capacity change from 0 to 512 [ 295.088467][ T7558] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1017'. [ 297.482061][ T1335] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 298.712671][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.933518][ T1335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.187816][ T1335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.268985][ T4291] Bluetooth: hci2: command 0x0405 tx timeout [ 299.317645][ T1335] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.346124][ T1335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.386186][ T1335] usb 3-1: config 0 descriptor?? [ 299.876727][ T1335] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 299.911750][ T1335] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 300.077216][ T1335] usb 3-1: USB disconnect, device number 10 [ 300.154800][ T7620] loop5: detected capacity change from 0 to 512 [ 300.201786][ T7620] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1029'. [ 302.387959][ T7647] loop4: detected capacity change from 0 to 512 [ 304.923384][ T4225] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 305.482275][ T4225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.526132][ T4225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.544854][ T4225] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.568458][ T4225] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.592266][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.667323][ T4225] usb 5-1: config 0 descriptor?? [ 306.078514][ T7684] loop5: detected capacity change from 0 to 512 [ 306.140841][ T7684] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 306.153787][ T4225] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 306.219380][ T4225] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 306.262377][ T7684] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.1053: corrupted in-inode xattr [ 306.310208][ T7684] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1053: couldn't read orphan inode 15 (err -117) [ 306.328618][ T7684] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,nolazytime,noload,min_batch_time=0x000000000000d23b,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 306.409336][ T4225] usb 5-1: USB disconnect, device number 7 [ 306.515899][ T7690] fido_id[7690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 307.587554][ T7697] loop2: detected capacity change from 0 to 512 [ 308.309182][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'. [ 311.494896][ T7732] loop4: detected capacity change from 0 to 512 [ 311.929555][ T7741] loop0: detected capacity change from 0 to 2048 [ 311.998009][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 312.464668][ T7741] FAT-fs (loop0): Unrecognized mount option " :" or missing value [ 312.864563][ T4471] Bluetooth: hci5: Frame reassembly failed (-84) [ 313.653150][ T7712] xt_TCPMSS: Only works on TCP SYN packets [ 313.799343][ T7764] 9pnet: Insufficient options for proto=fd [ 314.902054][ T4225] Bluetooth: hci5: command 0x1003 tx timeout [ 314.908650][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 316.071066][ T7796] 9pnet: Insufficient options for proto=fd [ 316.479065][ T7801] loop2: detected capacity change from 0 to 512 [ 316.536182][ T2303] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 316.906652][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.928381][ T2303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.949012][ T2303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.985995][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.995165][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.018842][ T2303] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.029397][ T2303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.068183][ T1108] Bluetooth: hci5: command 0x1001 tx timeout [ 317.088365][ T4187] Bluetooth: hci5: sending frame failed (-49) [ 317.095816][ T2303] usb 5-1: config 0 descriptor?? [ 317.574757][ T2303] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 317.652383][ T2303] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 318.876165][ T7825] loop2: detected capacity change from 0 to 512 [ 319.034721][ T7825] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.075246][ T7825] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.142103][ T4225] Bluetooth: hci5: command 0x1009 tx timeout [ 319.785828][ T1108] usb 5-1: USB disconnect, device number 8 [ 320.262809][ T7839] usb usb8: usbfs: process 7839 (syz.4.1106) did not claim interface 5 before use [ 320.357920][ T7839] loop4: detected capacity change from 0 to 512 [ 320.389004][ T7841] 9pnet: Insufficient options for proto=fd [ 323.879552][ T7884] loop0: detected capacity change from 0 to 512 [ 324.360477][ T7890] print_req_error: 2 callbacks suppressed [ 324.360495][ T7890] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.377936][ T7890] blk_update_request: I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.389168][ T7890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 324.399978][ T7890] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.411235][ T7890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 324.420856][ T7890] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 324.428957][ T7890] UDF-fs: Scanning with blocksize 512 failed [ 324.435633][ T7890] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.447448][ T7890] blk_update_request: I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.458606][ T7890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 324.468460][ T7890] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.479687][ T7890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 324.489336][ T7890] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 324.497474][ T7890] UDF-fs: Scanning with blocksize 1024 failed [ 324.504224][ T7890] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.515440][ T7890] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.526705][ T7890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 324.536486][ T7890] blk_update_request: I/O error, dev loop0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.547854][ T7890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 324.557619][ T7890] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 324.565318][ T7890] UDF-fs: Scanning with blocksize 2048 failed [ 324.571829][ T7890] blk_update_request: I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 324.583098][ T7890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 324.592852][ T7890] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 324.602933][ T7890] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 324.610602][ T7890] UDF-fs: Scanning with blocksize 4096 failed [ 324.616766][ T7890] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 327.024808][ T7902] loop0: detected capacity change from 0 to 512 [ 327.132088][ T7902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 327.309801][ T7902] EXT4-fs (loop0): 1 truncate cleaned up [ 327.315652][ T7902] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 327.537280][ T7911] loop2: detected capacity change from 0 to 512 [ 329.837707][ T7911] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 330.042722][ T7911] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.351482][ T7920] loop5: detected capacity change from 0 to 512 [ 331.729199][ T7934] print_req_error: 2 callbacks suppressed [ 331.729216][ T7934] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.746340][ T7934] blk_update_request: I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.757502][ T7934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 331.767784][ T7934] blk_update_request: I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.778975][ T7934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 331.788620][ T7934] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 331.796595][ T7934] UDF-fs: Scanning with blocksize 512 failed [ 331.803359][ T7934] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.814612][ T7934] blk_update_request: I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.825735][ T7934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 331.835733][ T7934] blk_update_request: I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.847128][ T7934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 331.856844][ T7934] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 331.865020][ T7934] UDF-fs: Scanning with blocksize 1024 failed [ 331.872185][ T7934] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.883393][ T7934] blk_update_request: I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.894625][ T7934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 331.904435][ T7934] blk_update_request: I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.915954][ T7934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 331.925593][ T7934] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 331.933283][ T7934] UDF-fs: Scanning with blocksize 2048 failed [ 331.939819][ T7934] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.951155][ T7934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 331.960969][ T7934] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 331.971001][ T7934] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 331.978758][ T7934] UDF-fs: Scanning with blocksize 4096 failed [ 331.984918][ T7934] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 334.518135][ T7958] loop4: detected capacity change from 0 to 512 [ 334.590739][ T7943] loop5: detected capacity change from 0 to 40427 [ 334.727735][ T7958] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 334.774137][ T7943] F2FS-fs (loop5): invalid crc value [ 334.829145][ T7958] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.855478][ T7943] F2FS-fs (loop5): Found nat_bits in checkpoint [ 335.070105][ T7943] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 335.270828][ T7966] binder: 7965:7966 ioctl 4018620d 0 returned -22 [ 335.379387][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.387361][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.768975][ T7981] loop4: detected capacity change from 0 to 512 [ 337.536027][ T7991] print_req_error: 2 callbacks suppressed [ 337.536046][ T7991] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.553505][ T7991] blk_update_request: I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.564698][ T7991] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 337.574733][ T7991] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.585937][ T7991] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 337.595705][ T7991] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 337.604010][ T7991] UDF-fs: Scanning with blocksize 512 failed [ 337.610693][ T7991] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.622218][ T7991] blk_update_request: I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.633399][ T7991] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 337.643382][ T7991] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.654784][ T7991] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 337.664490][ T7991] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 337.672619][ T7991] UDF-fs: Scanning with blocksize 1024 failed [ 337.679474][ T7991] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.690997][ T7991] blk_update_request: I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.702327][ T7991] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 337.712743][ T7991] blk_update_request: I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.724410][ T7991] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 337.734266][ T7991] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 337.742123][ T7991] UDF-fs: Scanning with blocksize 2048 failed [ 337.748857][ T7991] blk_update_request: I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.760539][ T7991] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 337.770398][ T7991] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 337.780063][ T7991] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 337.787868][ T7991] UDF-fs: Scanning with blocksize 4096 failed [ 337.794015][ T7991] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 337.869837][ T7981] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 337.969560][ T7981] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.315586][ T7993] loop2: detected capacity change from 0 to 512 [ 338.437811][ T7993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 338.601742][ T7993] EXT4-fs (loop2): 1 truncate cleaned up [ 338.629368][ T7993] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 339.058113][ T8001] loop4: detected capacity change from 0 to 512 [ 339.068216][ T8000] xt_hashlimit: size too large, truncated to 1048576 [ 339.120798][ T8001] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.152343][ T8001] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.235857][ T8006] 9pnet: Insufficient options for proto=fd [ 339.486629][ T8010] binder: 8009:8010 ioctl 4018620d 0 returned -22 [ 339.713473][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.746290][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.340700][ T8017] loop2: detected capacity change from 0 to 512 [ 340.419591][ T8017] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 340.487237][ T7946] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.496407][ T7946] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.511996][ T7946] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.525524][ T7946] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.725496][ T8019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 340.800716][ T8019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.675596][ T8032] loop4: detected capacity change from 0 to 512 [ 342.756351][ T26] audit: type=1326 audit(1771906814.387:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb781e7b629 code=0x7ffc0000 [ 342.863099][ T26] audit: type=1326 audit(1771906814.427:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb781e7b629 code=0x7ffc0000 [ 342.895640][ T26] audit: type=1326 audit(1771906814.427:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb781e7b629 code=0x7ffc0000 [ 342.929321][ T8032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 343.341704][ T26] audit: type=1326 audit(1771906814.437:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb781e7b629 code=0x7ffc0000 [ 343.415280][ T8032] EXT4-fs (loop4): 1 truncate cleaned up [ 343.692063][ T8032] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 343.967893][ T8043] loop0: detected capacity change from 0 to 512 [ 344.007402][ T26] audit: type=1326 audit(1771906814.437:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb781e7b629 code=0x7ffc0000 [ 344.177865][ T26] audit: type=1326 audit(1771906814.437:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb781e7b629 code=0x7ffc0000 [ 344.637980][ T8043] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.701985][ T26] audit: type=1326 audit(1771906814.437:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8027 comm="syz.5.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb781e7b629 code=0x7ffc0000 [ 344.733508][ T8049] 9pnet: Insufficient options for proto=fd [ 344.749796][ T8043] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.075651][ T8068] binder: 8065:8068 ioctl c0306201 0 returned -14 [ 349.343854][ T8086] loop4: detected capacity change from 0 to 512 [ 349.372624][ T8088] 9pnet: Insufficient options for proto=fd [ 349.400790][ T8086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 349.498159][ T8086] EXT4-fs (loop4): 1 truncate cleaned up [ 349.504144][ T8086] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 349.632907][ T8096] loop0: detected capacity change from 0 to 512 [ 350.084260][ T8096] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 350.106867][ T8096] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.210474][ T8120] xt_socket: unknown flags 0xc [ 353.271351][ T8127] binder: 8126:8127 ioctl c0306201 0 returned -14 [ 354.902092][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 355.476155][ T8137] loop0: detected capacity change from 0 to 512 [ 356.094058][ T8137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 356.457824][ T8137] EXT4-fs (loop0): 1 truncate cleaned up [ 356.493922][ T8137] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 358.075305][ T8166] 9p: Unknown Cache mode readahead [ 360.674033][ T8182] loop4: detected capacity change from 0 to 512 [ 360.925138][ T8182] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 361.032698][ T8198] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 361.078438][ T8182] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.749818][ T4230] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 364.122655][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 364.315770][ T4230] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 469.541888][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 469.548929][ C0] (detected by 0, t=10502 jiffies, g=34177, q=86) [ 469.555481][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10498 (4294984088-4294973590), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 469.568969][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g34177 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 469.580290][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 469.590305][ C0] rcu: RCU grace-period kthread stack dump: [ 469.596226][ C0] task:rcu_preempt state:R running task stack:28016 pid: 15 ppid: 2 flags:0x00004000 [ 469.607085][ C0] Call Trace: [ 469.610514][ C0] [ 469.613496][ C0] __schedule+0x11ef/0x43c0 [ 469.618235][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 469.623758][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 469.628995][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 469.634922][ C0] ? _raw_spin_unlock+0x40/0x40 [ 469.639816][ C0] ? release_firmware_map_entry+0x190/0x190 [ 469.645879][ C0] ? __mod_timer+0x91e/0xd00 [ 469.650570][ C0] schedule+0x11b/0x1e0 [ 469.654772][ C0] schedule_timeout+0x184/0x2d0 [ 469.659679][ C0] ? console_conditional_schedule+0x40/0x40 [ 469.665811][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 469.671929][ C0] ? update_process_times+0x200/0x200 [ 469.677359][ C0] ? prepare_to_swait_event+0x331/0x350 [ 469.682955][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 469.687942][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 469.694400][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 469.699264][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 469.704522][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 469.709794][ C0] rcu_gp_kthread+0x9b/0x370 [ 469.714434][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 469.720380][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 469.725546][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 469.731480][ C0] ? __kthread_parkme+0x157/0x1b0 [ 469.736583][ C0] kthread+0x436/0x520 [ 469.740770][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 469.746002][ C0] ? kthread_blkcg+0xd0/0xd0 [ 469.750630][ C0] ret_from_fork+0x1f/0x30 [ 469.755099][ C0] [ 469.758139][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 469.764499][ C0] NMI backtrace for cpu 0 [ 469.768872][ C0] CPU: 0 PID: 8228 Comm: syz.1.1222 Not tainted syzkaller #0 [ 469.776271][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.786361][ C0] Call Trace: [ 469.789672][ C0] [ 469.792542][ C0] dump_stack_lvl+0x188/0x250 [ 469.797262][ C0] ? show_regs_print_info+0x20/0x20 [ 469.802499][ C0] ? load_image+0x400/0x400 [ 469.807043][ C0] ? irq_work_queue+0xbf/0x140 [ 469.811853][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 469.816838][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 469.823032][ C0] ? _printk+0xda/0x130 [ 469.827319][ C0] ? cpu_online+0x1d/0x30 [ 469.831778][ C0] ? load_image+0x400/0x400 [ 469.836341][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 469.842732][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 469.848765][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 469.854981][ C0] print_other_cpu_stall+0x1110/0x1270 [ 469.860493][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 469.865480][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 469.870937][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 469.876013][ C0] rcu_sched_clock_irq+0x843/0x1120 [ 469.881257][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 469.886159][ C0] ? account_process_tick+0x22a/0x3a0 [ 469.891577][ C0] update_process_times+0x193/0x200 [ 469.896820][ C0] tick_sched_timer+0x37d/0x560 [ 469.901729][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 469.907351][ C0] __hrtimer_run_queues+0x4ad/0xb70 [ 469.912634][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 469.917811][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 469.923949][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 469.929064][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 469.935277][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 469.940975][ C0] [ 469.943954][ C0] [ 469.946928][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 469.952966][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 469.958817][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ee ea 97 f7 48 89 df e8 26 c3 98 f7 e8 91 b5 b9 f7 fb bf 01 00 00 00 a6 c9 8c f7 65 8b 05 47 d7 3c 76 85 c0 74 02 5b c3 e8 94 e4 3a [ 469.963569][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 469.978475][ C0] RSP: 0018:ffffc900037afbc0 EFLAGS: 00000282 [ 469.978500][ C0] RAX: 2b2dee9dc1249300 RBX: ffff888028cfef00 RCX: 2b2dee9dc1249300 [ 469.978516][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 470.006871][ C0] RBP: 0000000000000000 R08: ffff888028cfef03 R09: 1ffff1100519fde0 [ 470.014899][ C0] R10: dffffc0000000000 R11: ffffed100519fde1 R12: ffff888028cfef00 [ 470.022918][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 470.030951][ C0] get_signal+0x11d6/0x12c0 [ 470.035734][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 470.041463][ C0] ? _copy_from_user+0x111/0x170 [ 470.046466][ C0] ? load_gs_index+0x130/0x130 [ 470.051296][ C0] ? get_sigframe_size+0x10/0x10 [ 470.056300][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 470.061815][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 470.067146][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 470.072741][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 470.078336][ C0] do_syscall_64+0x58/0xa0 [ 470.082795][ C0] ? clear_bhb_loop+0x30/0x80 [ 470.086192][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.087515][ C0] ? clear_bhb_loop+0x30/0x80 [ 470.087555][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 470.104437][ C0] RIP: 0033:0x7f2689e95627 [ 470.108907][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 470.128658][ C0] RSP: 002b:00007f26880ef0e8 EFLAGS: 00000246 [ 470.134779][ C0] RAX: 00000000000000ca RBX: 00007f268a10efa8 RCX: 00007f2689e95629 [ 470.134868][ T4230] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 470.142934][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f268a10efa8 [ 470.142957][ C0] RBP: 00007f268a10efa0 R08: 0000000000000000 R09: 0000000000000000 [ 470.142968][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.142979][ C0] R13: 00007f268a10f038 R14: 00007fff2ad5c7b0 R15: 00007fff2ad5c898 [ 470.143009][ C0] SYZFAIL: failed to send rpc fd=3 want=296 sent=0 n=-1 (errno 32: Broken pipe) [ 470.588131][ T4230] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 470.733105][ T4230] usb 1-1: config 250 has no interface number 0 [ 470.739553][ T4230] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 470.801915][ T4230] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 470.832400][ T4230] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 35873, setting to 1024 [ 470.851946][ T4230] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 470.862856][ T4230] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 470.877141][ T4230] usb 1-1: config 250 interface 228 has no altsetting 0 [ 471.078295][ T4230] usb 1-1: string descriptor 0 read error: -71 [ 471.085411][ T4230] usb 1-1: New USB device found, idVendor=8325, idProduct=d2da, bcdDevice= 0.07 [ 471.094815][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 471.146288][ T4230] usb 1-1: can't set config #250, error -71 [ 471.159996][ T4230] usb 1-1: USB disconnect, device number 10 [ 471.656328][ T4336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.944888][ T4336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.003833][ T4336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.100115][ T4336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.902198][ T4336] device hsr_slave_0 left promiscuous mode [ 472.908844][ T4336] device hsr_slave_1 left promiscuous mode [ 472.915739][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.925439][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.936329][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.943884][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.951805][ T4336] device bridge_slave_1 left promiscuous mode [ 472.958366][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.967378][ T4336] device bridge_slave_0 left promiscuous mode [ 472.973712][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.987819][ T4336] device veth1_macvtap left promiscuous mode [ 472.994056][ T4336] device veth0_macvtap left promiscuous mode [ 473.000243][ T4336] device veth1_vlan left promiscuous mode [ 473.006791][ T4336] device veth0_vlan left promiscuous mode [ 473.168775][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 473.185772][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 473.201032][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.217520][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.281214][ T4336] bond0 (unregistering): Released all slaves